Lucene search
+L

247 matches found

CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•15 views

EndRun Technologies Sonoma D12 Network Time Server 安全漏洞

EndRun Technologies Sonoma D12 Network Time Server is a time synchronization device from EndRun Technologies, USA. A security vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 version, which stems from vulnerability to OS command injecti...

9.1CVSS7.4AI score0.0121EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/06 12:00 a.m.•5 views

CVE-2025-60957

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

7.5AI score0.01167EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•27 views

PT-2025-40924

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A Cross Site Scripting XSS issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS. This flaw may allow attackers to obtain sensitive information...

7.3CVSS5.6AI score0.0026EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•71 views

PT-2025-40932

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A Cross Site Scripting XSS issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS. This flaw could allow attackers to obtain sensitive information...

7.3CVSS5.6AI score0.00262EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•14 views

PT-2025-40929

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to execute arbitrary code, cause a denial of service, gain escalate...

8.2CVSS7.3AI score0.00921EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•3 views

CVE-2025-60960: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

8.2CVSS6.3AI score0.00913EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•8 views

CVE-2025-60965: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

9.1CVSS6.3AI score0.0121EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•4 views

CVE-2025-60963: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

8.2CVSS6.3AI score0.00921EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•4 views

CVE-2025-60962: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

8.2CVSS5.9AI score0.0074EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/06 12:00 a.m.•32 views

CVE-2025-60963

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

0.00921EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/06 12:00 a.m.•25 views

CVE-2025-60969

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...

0.00558EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/06 12:00 a.m.•39 views

CVE-2025-60959

The EndRun Technologies Sonoma D12 Network Time Server (GPS) is affected by an OS Command Injection vulnerability in firmware version 6010-0071-000 Ver 4.00 . This flaw, caused by the improper neutralization of special elements used in an OS command, allows remote attackers to gain sensitive info...

8.2CVSS6.9AI score0.0074EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/06 12:00 a.m.•8 views

CVE-2025-60962

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

7AI score0.0074EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/06 12:00 a.m.•25 views

CVE-2025-60959

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

0.0074EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/06 12:00 a.m.•41 views

CVE-2025-60957

The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically firmware F/W 6010-0071-000 Ver 4.00 , is susceptible to an OS Command Injection vulnerability. This flaw allows an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and access sensi...

9.9CVSS7.5AI score0.01167EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/10/06 12:00 a.m.•33 views

CVE-2025-60963

The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically firmware F/W 6010-0071-000 Ver 4.00 , is vulnerable to an OS Command Injection vulnerability. This flaw allows an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and access sensit...

8.2CVSS7.5AI score0.00921EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/10/06 12:00 a.m.•41 views

CVE-2025-60956

A Cross Site Request Forgery (CSRF) vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically affecting firmware F/W 6010-0071-000 Ver 4.00 . This flaw allows an attacker to execute arbitrary code , cause a denial of service , gain escalated privileges , ...

8CVSS7.2AI score0.00199EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•16 views

EndRun Technologies Sonoma D12 Network Time Server 安全漏洞

EndRun Technologies Sonoma D12 Network Time Server is a time synchronization device from EndRun Technologies, USA. A security vulnerability exists in EndRun Technologies Sonoma D12 Network Time Server version 4.00, which stems from vulnerability to OS command injection attacks that could lead to...

8.2CVSS7.4AI score0.00913EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/06 12:00 a.m.•45 views

CVE-2025-60967

A Cross Site Scripting (XSS) vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically affecting firmware F/W 6010-0076-000 Ver 4.00 . The flaw stems from the improper neutralization of input during web page generation , which could allow an attacker to g...

7.3CVSS5.7AI score0.00262EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/06 12:00 a.m.•8 views

CVE-2025-60956

Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

7.2AI score0.00199EPSS
SaveExploits0References2
Rows per page
Query Builder